RK55 Privacy Policy – How We Protect Your Personal Data in Malaysia

This Privacy Policy ("Policy") describes how rk55 ("Platform", "we", "us") collects, uses, stores, protects, and in certain circumstances shares the personal information of members and users of the rk55.express platform. This document is written in Bahasa Malaysia to ensure complete clarity for all Malaysian players using the rk55 platform.

By registering an rk55 account or by continuing to use the platform after this Policy is published or updated, you agree to the data collection and usage practices described herein. If you do not agree with any part of this Policy, you should not use the rk55 platform.

This Policy should be read together with the rk55 Terms & Conditions. In the event of any conflict between the two documents on matters relating to privacy, this Privacy Policy shall prevail.

Rk55 collects various types of personal data depending on how you interact with the platform. Below is a detailed explanation of the categories of data collected:

When you use the rk55 platform, our systems automatically record certain technical information required for safe and smooth platform operations:

• Your device's IP address (used for location verification and fraud detection).
• Device type, operating system, and browser version used.
• The date, time and duration of your login sessions.
• Game activity records – game type, bet amount, outcome, and timestamp.
• Financial transaction records – deposits, withdrawals, and bonus history.
• Technical error log data for platform troubleshooting purposes.

In certain cases, rk55 may receive information about you from trusted third-party sources, including identity verification service providers we use to validate the documents you submit, and payment service providers such as Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks) that confirm the status of your financial transactions. This information is used solely for verification and security purposes.

Rk55 collects and uses your personal data only for legitimate purposes that are directly related to the provision of the platform's services. We do not collect data beyond what is necessary for the stated purposes:

• Account Operations: Opening, managing, and maintaining your rk55 account, including processing deposits and withdrawals in MYR using your preferred Malaysian payment method.
• Identity Verification: Verifying that you meet rk55's eligibility requirements, including the minimum age of 18 and your status as a legitimate individual user.
• Fraud Prevention: Detecting and preventing fraudulent activity, money laundering, bonus abuse, and multiple account usage that violates rk55's Terms & Conditions.
• Legal Compliance: To fulfil the legal obligations applicable to rk55's platform operations, including financial record-keeping requirements.
• Customer Support: Processing and responding to enquiries, complaints, and requests for assistance submitted to the rk55 support team.
• Service Improvement: Analysing aggregate usage patterns (not individual behaviour) to improve platform performance, user experience, and the selection of games offered.
• Service Communications: Sending you important notifications related to your account, transactions, changes to our terms, or relevant security information.
• Responsible Gaming: Monitoring gameplay activity patterns to identify members who may need responsible gaming support and to enforce limits you have set yourself.

Rk55 does not sell, rent, or trade members' personal data to any party for commercial purposes. However, in the course of operating the platform securely and in compliance with the law, rk55 may share certain data with the following categories of third parties under strictly limited circumstances:

To process your deposits and withdrawals in MYR, rk55 is required to share the necessary transaction details with our payment service providers — including Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow, and FPX (Maybank2u, CIMB Clicks). This sharing is strictly limited to information required for transaction processing, and all providers are bound by confidentiality agreements with rk55.

Slots, Live Casino and other game providers operating on the rk55 platform may receive the minimum technical data required to deliver gameplay (such as game session IDs). These providers do not receive your full identity information, and all of them are bound by strict data protection agreements with rk55.

Rk55 may disclose your personal data if required to do so by a valid court order, a request from a competent legal authority, or any other legally binding obligation applicable to rk55. In such cases, rk55 will disclose only the minimum data necessary to satisfy the legal requirement, and will endeavour to notify you of the disclosure unless prohibited by law.

The rk55 platform uses cookies and similar tracking technologies to enhance the user experience and maintain platform security. Below is an explanation of the types of cookies used and their purposes:

These cookies are essential for the basic functioning of the rk55 platform and cannot be disabled without affecting your ability to use it. They include login session cookies that keep you securely signed in during your gaming session, security cookies that protect your account against session hijacking, and language preference cookies that store your language settings.

These cookies help rk55 understand how users interact with the platform so we can make meaningful improvements. Data collected is aggregated and does not identify you individually. This includes the most frequently visited pages, time spent in each section of the platform, and technical errors that occur.

You can manage and delete cookies through your browser settings. Please note, however, that disabling essential cookies may affect the functionality of the rk55 platform and your gaming experience. For guidance on managing cookies in popular browsers such as Chrome, Safari or Firefox, refer to the respective browser's help documentation.

Protecting members' personal data is rk55's highest priority. We invest seriously in security infrastructure and practices to ensure your data is always protected to the highest standards we can deliver:

• Encryption in Transit: All communications between your device and rk55's servers are encrypted using TLS protocol with 256-bit SSL encryption — the same standard used by Malaysia's leading banking institutions.
• Encryption at Rest: Sensitive data stored in rk55's databases — including account verification information and financial records — is encrypted at rest using industry-standard encryption algorithms.
• Layered Access Controls: Access to member data within the rk55 system is strictly governed by a "need-to-know" principle – only staff with a legitimate work requirement are permitted to access specific categories of data.
• Regular Security Audits: The rk55 platform undergoes regular security audits and penetration testing by independent third parties to identify and address potential vulnerabilities.
• Real-Time Threat Monitoring: An automated monitoring system operates 24/7 to detect unusual activity, suspicious login attempts, or transaction patterns that may indicate fraudulent behaviour.
• Incident Response Plan: rk55 maintains a documented security incident response procedure. In the event of a data breach affecting members, we are committed to notifying affected parties within a reasonable timeframe.

While rk55 takes all reasonable steps to protect your data, no security system can offer an absolute 100% guarantee. You also play an important role in your account's security — keep your password confidential, avoid logging in over public Wi-Fi without a VPN, and report any suspicious activity in your rk55 account to us immediately.

As an rk55 member, you have the following rights regarding your personal data that we hold. rk55 is committed to respecting and facilitating the exercise of these rights:

To exercise any of the above rights, send a written request to us at support@rk55.express with the subject line "Data Privacy Rights Request". Please include your full name, rk55 account number and the details of your request. We will verify your identity before processing any data-related request to ensure account security.

Rk55 retains your personal data only for as long as is necessary for the purposes set out in this Policy, or as required by law. The following is a general guide to our data retention periods:

• Active Account Data: Retained for the duration your account is active and for a reasonable period after it becomes inactive.
• Financial Transaction Records: Retained for a minimum of 7 years in accordance with applicable financial record-keeping requirements.
• Game Logs: Retained for 2 years for dispute resolution and game fairness audit purposes.
• Support Communication Records: Retained for 3 years after case resolution for reference and service improvement purposes.
• Identity Verification Data: Retained for the period required by applicable legal compliance obligations.

When data is no longer needed and there is no legal obligation to retain it, rk55 will securely delete or anonymise that data. Digital deletion is carried out in a manner that ensures the data cannot be recovered by any unauthorised party.

The rk55 platform is intended solely for individuals aged 18 and above. Rk55 does not knowingly collect or process personal data from anyone under the age of 18.

If rk55 becomes aware or has reason to believe that personal data of an individual under the age of 18 has been collected inadvertently, we will take immediate steps to delete that data and suspend the associated account pending age verification.

Rk55 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, new legal requirements, or changes in the way the rk55 platform operates. The "Last updated" date at the top of this document indicates when the most recent amendment was made.

For material and significant amendments that affect how we use your personal data, rk55 will endeavour to provide adequate notice via your registered email or in-platform notification before the changes take effect. Your continued use of the rk55 platform after any amendment is published will be considered your acceptance of the revised Policy.

We recommend reviewing this Policy regularly, particularly before providing new personal information or using new platform features. rk55 maintains an archive of previous versions of this Privacy Policy, which can be requested via customer support if needed.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way rk55 handles your personal data, our team is ready to assist you in Bahasa Malaysia:

• Privacy Email: support@rk55.express – use the subject line "Data Privacy Enquiry" to ensure your message is routed correctly to the relevant team.
• Live Chat: Available 24/7 on the rk55 platform – average response time under 3 minutes.
• WhatsApp: rk55's official number displayed in the support section of the platform.

Rk55 is committed to responding to all legitimate privacy enquiries within 14 business days of receipt. For more complex requests, such as full data access or data deletion requests, processing may take up to 30 business days.